Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
File: zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json)
Hash identifier: NPfQERdWv1coDoTGTvA8DNVUpgwnlWL2zfD+FAe16HE=
Subject key identifier: B4:A2:2B:5F:1F:16:50:02:F1:33:89:D7:D5:75:27:0E:2B:7D:E2:F3
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Certificate issuer: /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial: 0194BBCEBBA0CFD3E3CB7EC6A795352A5CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
Manifest number: 0A20
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: qrZKSOFpAICcNRLOx5AIirWqvBo.roa (hash: h3wCdr8A46DdDE5I42tcnvu/LE64VypZvT4djSXNycs=)
2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: +hyuM6TPwHLcCT9+qgQ0+1ebw1u/p6apbbpoYGq0PPI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bb:a0:cf:d3:e3:cb:7e:c6:a7:95:35:2a:5c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=b4a22b5f1f165002f13389d7d575270e2b7de2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:e1:53:55:8b:97:27:1a:41:cf:90:87:1f:
28:98:c4:89:4b:80:1e:c3:eb:48:de:ae:c3:e3:34:
0f:86:b9:6a:4a:61:0f:b8:f4:ab:bb:70:c0:4e:d2:
db:1a:bf:f4:f2:4c:1b:b4:50:f1:75:7c:3f:b7:b3:
52:bc:5c:9d:f3:87:e3:43:7e:c2:1d:7b:37:24:20:
ec:d7:ed:9f:cf:05:02:69:a5:da:3f:0b:5a:c1:8a:
1f:18:e5:95:23:b0:c9:6f:5a:b6:38:87:06:ce:48:
47:d5:d0:00:fb:62:8e:83:62:7c:1a:37:43:23:3f:
35:6d:cd:be:a7:0b:98:0b:01:da:e3:d3:8a:63:bf:
52:8d:4c:e2:92:f4:a1:cd:52:04:41:c8:e4:f4:b5:
22:a9:fc:cb:14:42:07:46:52:f6:0e:50:14:e5:79:
da:0a:a4:e0:a5:41:96:e5:2a:63:b5:93:5d:58:3e:
7a:76:e5:f5:13:72:98:95:01:2e:0c:42:57:27:9b:
ae:d4:fe:fe:29:40:62:24:40:87:00:e9:18:c9:43:
ed:a5:87:09:48:fc:b2:e7:10:36:09:b3:c8:2b:3e:
2f:32:c6:22:31:13:6f:d3:cb:c3:4d:a8:18:18:f7:
10:a1:1b:11:e7:93:8d:99:80:1f:cc:b5:a4:09:0e:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A2:2B:5F:1F:16:50:02:F1:33:89:D7:D5:75:27:0E:2B:7D:E2:F3
X509v3 Authority Key Identifier:
keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c7:89:60:41:65:28:16:1f:1d:be:a1:58:15:14:f5:c4:bb:
eb:43:54:8b:55:71:d3:e1:e7:b6:95:50:9e:21:84:5d:36:48:
83:fa:c1:48:65:ef:01:92:e3:93:9a:3a:5e:a1:c9:98:41:58:
64:87:79:d7:f7:5c:04:e7:1c:c3:7e:6e:57:7c:40:c1:bd:58:
65:81:fd:8e:9b:59:a1:9c:27:fc:0b:a9:26:c8:9c:27:18:46:
5e:33:98:c7:87:e9:48:a5:f8:75:f1:7a:4c:2a:04:b9:c8:d6:
2b:39:4a:7f:c0:c2:f2:9a:64:0c:13:fa:a2:16:28:7a:72:83:
e8:6a:68:da:ac:0c:68:80:45:1b:18:7b:b0:4e:fc:18:89:42:
82:fd:af:1a:f2:95:21:01:fb:e2:4e:71:3f:91:e2:5a:ac:ea:
c1:11:e3:74:d7:18:90:a3:ea:27:f2:bf:20:72:5d:fc:bc:f6:
2d:33:dc:8e:32:20:e0:aa:c5:8d:06:1c:4a:41:06:b1:4e:3c:
6b:b5:88:dc:52:dd:48:17:5d:7f:ad:66:4a:87:92:a5:90:9a:
33:f0:6f:4c:c8:e0:18:12:1e:cb:37:ee:a9:8f:5e:28:1f:8d:
cb:55:0f:15:88:fc:fd:34:02:f4:38:95:6a:79:db:9f:3a:fe:
da:9b:92:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:19 2025 by rpki-client